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Remarks 



3 Claims 1 - 50 are pending. 
4 

5 Election/Restrictions 

6 

7 Applicant's election with traverse of Group II in the reply filed on 6/16/05 is 

8 acknowledged. The Office has found the applicant's reason for traversal to be 

9 persuasive. After reconsideration of the pending claims, the Office has withdrawn the 
10 restriction. 

11 

1 2 Claim Objections 

13 

14 Claim 48 is objected to because of the following informalities: Nonsensical 

15 phrasing - "requested function cryptographic function". Appropriate correction is 

16 required. 
17 

18 
19 
20 
21 
22 
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1 Claim Rejections - 35 USC § 101 

2 

3 35 U.S.C. 101 reads as follows: 

4 Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 

5 matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 

6 conditions and requirements of this title. 
7 

8 Claims 7, 10 - 12, 14, 18, and 19 are rejected under 35 U.S.C. 101 because 

9 the claimed invention is directed to non-statutory subject matter. 

10 

11 Regarding these claims 7, 10-12, 14, and 18, they are directed to a device of 



12 which the claim language "comprising a cryptographic module" allows the device to be 

13 implemented solely in software (Specification, page 5). It is therefore rejected under 35 

14 U.S.C. 101 as not being tangible. 
15 



16 Claim Rejections - 35 USC § 102 

17 

18 The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 

19 form the basis for the rejections under this section made in this Office action: 

20 A person shall be entitled to a patent unless - 

21 (b) the invention was patented or described in a printed publication in this or a foreign country or in public 

22 use or on sale in this country, more than one year prior to the date of application for patent in the United 

23 States. 
24 

25 

26 Claims 1, 4, 6, 19, 20, 24, 26 - 28, 31 - 34, 47, and 48 are rejected under 35 

27 U.S.C. 102(b) as being anticipated by Caputo et al., "Pocket Encrypting and 

28 Authenticating Communications Device", U.S. Patent 5,778,071. 
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1 Regarding claim 1, Caputo et al. discloses a method of authenticating 

2 communications, the method comprising: 

3 using a mobile communications device, which includes a cryptographic module 

4 for use in mobile communication, as an cryptographic service provider (Caputo et al., 

5 Col. 2, lines 23-27; Col. 3, lines 33-38). 
6 

7 Regarding claim 4, Caputo et al. discloses: 

8 providing a wired connection between the mobile communications device and the 

9 computer (Caputo etal., Col. 6, lines 41-61). 
10 

1 1 Regarding claim 6, Caputo et al. discloses: 

1 2 when the application program interface requires cryptographic functionality, 

1 3 calling a cryptographic service provider function in the mobile communications device 

14 (Caputo et al., Col. 15, lines 13-39). 
15 

16 Regarding claim 19, Caputo et al. discloses: 

17 a module for a personal computer, wherein, in response to the module receiving 

1 8 a first command from a cryptographic application program interface, indicating that it 

1 9 requires cryptographic functionality, the module sends a second command to a mobile 

20 communication device, such that the mobile communications device acts as a 

21 cryptographic service provider for said personal computer (Caputo et al., Col. 1 5, lines 

22 13-39). Caputo discloses an application program running on a computer. A set of 
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1 codes and signals are issued, when encryption is requested by the application program 

2 ("a first command"), and they are sent to the device ("a second command"). 
3 

4 Regarding claim 20, it comprises the limitations of claim 1 , and is rejected for the 

5 same reasons. 
6 

7 Regarding claim 24, Caputo et al. discloses: 

8 a computer; and mobile communications device, including a cryptographic 

9 module, the computer having at least one application which requires cryptographic 

1 0 functionality, a first part of the required cryptographic functionality being provided in the 

1 1 computer, and a second part of the required cryptographic functionality being provided 

12 in the mobile communications device (Caputo et al., Col. 15, lines 13-39, col. 9, lines 

1 3 28-36). As disclosed, the computer provides a first part of the cryptographic 

14 functionality by providing the instructions for the encrypting device. The device provides 

15 a second part of the cryptographic functionality by executing the encryption algorithm. 

1 6 the computer and the mobile communications device having means for 

1 7 establishing a secure communications path therebetween (Caputo et al., fig. 3); and the 

1 8 computer further comprising an interface device which, on determining that an 

1 9 application needs use cryptographic functionality, selects the functionality provided in 

20 the computer, or the functionality provided in the mobile communications device, and 

21 sends command thereto (Caputo et al., Col. 15, lines 13-39). 
22 
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1 Regarding claim 26, Caputo et al. discloses: 

2 wherein the computer application which requires cryptographic functionality is an 

3 internal memory access application (Caputo et al., Col. 15, lines 13-39). 
4 

5 Regarding claim 27, Caputo et al. discloses: 

6 wherein the computer application which requires cryptographic functionality is an 

7 external communication application (Caputo et al., Col. 15, lines 13-39). 
8 

9 Regarding claims 28 and 31 , they are similar in limitations to claims 1 and 6, and 

1 0 are rejected for the same reasons. 
11 

12 Regarding claims 32 and 33, Caputo et al. discloses: 

1 3 using a cryptographic module realized in hardware in the mobile communications 

14 device and using a cryptographic module realized in software in the mobile 

15 communications device (Caputo et al., Col. 9, lines 40-45). 
16 

17 Regarding claims 34, Caputo et al. discloses: 

1 8 using a cryptographic module provided on an external smart card which can be 

19 read by the mobile communications device (Caputo et. al., Col. 10, lines 19-31, 51-59; 

20 Col. 13, lines 4-10, 25-67). 
21 

22 Regarding claim 47, Caputo et al. discloses: 
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1 an application interface for connection to a computer application; and an external 

2 interface for connection to a mobile communication device containing a cryptographic 

3 module wherein, when the module receives from the application interface a request for 

4 a cryptographic function which the module is unable to provide, the module sends a 

5 command over the external interface to the mobile communications device to request 

6 the cryptographic function therefrom (Caputo et al., Col. 15, lines 13-39, figs. 3, 4a, 5a). 
7 

8 Regarding claim 48, Caputo et al. discloses: 

9 wherein the module has some cryptographic functionality, and comprises means 

1 0 for determining in response to a request from the application interface whether it is able 

1 1 to provide the requested function cryptographic function (Caputo et al., Col. 15, lines 13- 

12 39). Caputo et al. discloses that the computer receives a command to have data sent to 

1 3 the device, encrypted, and sent to the network, or have data sent to the device, 

14 encrypted, and returned to the application interface. In response to the selected option, 

15 the computer understands the request and appropriately controls the device. Thus, it 

16 comprises means to determine that it is able to provide the requested cryptographic 

17 function. 
18 

19 Claim Rejections - 35 USC § 103 

20 

21 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

22 obviousness rejections set forth in this Office action: 
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1 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

2 forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 

3 the prior art are such that the subject matter as a whole would have been obvious at the time the 

4 invention was made to a person having ordinary skill in the art to which said subject matter pertains. 

5 Patentability shall not be negatived by the manner in which the invention was made. 
6 

7 Claims 2, 3, 7, 10 - 18, 21, 22, 25, 29, 30, 35 - 40, 42, and 44, are rejected 



8 under 35 U.S.C. 103(a) as being unpatentable over Caputo et al. as applied to 

9 claims 1, 4, 6, 19, 20, 24, 26 - 28, 31 - 34, 47, and 48 above, further in view of 

10 Grimm et al., "Portable Computer Stored Removable Mobile Telephone", U.S. 

1 1 Patent 5,907,815, and further in view of Geiger et al., "Secure Wireless Electronic- 

12 Commerce System with Wireless Network Domain", U.S. Patent 6,463,534 B1. 

13 Caputo et al. discloses a mobile communications device, comprising a 

14 cryptographic module, which is used as a token for authenticating a user and for 

15 encrypting communications (Caputo et al., Col. 2, lines 23-27; Col. 3, lines 33-38, 46- 

16 50; Fig. 2). The device sends communications to a recipient by wired telephonic means 

17 (Caputo et al., Fig. 2, elem. 14; Col. 16, lines 40-45; Col. 17, lines 3-7). Caputo et al, 

18 however, does not disclose that the device sends the communications by wireless 

19 means, or that the device is enabled to use the enhanced wireless security of the 

20 Wireless Application Protocol. 



21 Grimm et al. discloses a mobile communications device ("wireless phone") that is 

22 enabled to send communications from a user of a connected computer via wireless 

23 telephonic means (Grimm et al., Col. 12, lines 12-33; Fig. 7; Fig. 9). 

24 Thus it would have been obvious to one of ordinary skill in the art to combine the 

25 wireless mobile communication feature of Grimm et al. with the mobile communication 



Application/Control Number: 09/928,491 Page 9 

Art Unit: 2137 

1 device of Caputo et al. because it is apparent that the ability to operate wirelessly would 

2 enhance a communication device designed to be mobile and portable. 

3 Geiger et al., discloses a wireless mobile device and system used to send 

4 secure wireless communication using the Wireless Application Protocol (Geiger et al., 

5 Col. 2, lines 49-65; Col. 9, lines 22-53; col. 11, line 64 -col. 12, line 8). As disclosed by 

6 Geiger et al., WAP (utilizing WTLS and a WIM) is a convenient protocol to use with 

7 wireless mobile communications, chosen for its security. 

8 Thus, it would have been obvious to one of ordinary skill in the art to employ the 

9 secure Wireless Application Protocol feature of Geiger et al. with the combination of 

10 Caputo et. al. and Grimm et al. because it is obvious that a wireless mobile 

1 1 communication device designed for authenticated and encrypted communications would 

12 be enhanced by the use of a convenient communication protocol and system that 

13 features increased wireless security. 
14 



15 Regarding claim 2, the combination of Caputo et al., Grimm et al., and Geiger et 

16 al., disclose: 

17 the mobile communications device is a WAP-enabied device (Geiger et al., Fig. 

18 1 , Col. 9, lines 22-53). As disclosed, the device is WAP-enabled since it communicates 

1 9 using the WAP protocol. 
20 

21 Regarding claim 3, the combination of Caputo et al., Grimm et al., and Geiger et 

22 al., disclose: 
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1 wherein the cryptographic module is that used by the mobile communications 

2 device for Wireless Transport Layer Security communications (Geiger et al., Col. 2, 

3 lines 49-65; Col. 6, lines 55-58; Col. 9, lines 22-53). As disclosed, communication 

4 security, the functionality provided by the cryptographic module, is accomplished using 

5 WTLS communications. 
6 

7 Regarding claim 7, the combination of Caputo et al., Grimm et al., and Geiger et 

8 al., disclose: 

9 a cryptographic module, the cryptographic module being usable: for encoding 

1 0 wireless communications from the device; in a cryptographic service provider with an 

1 1 application program interface of a remote computer (Caputo et al., Col. 2, lines 23-27; 

12 Col. 3, lines 33-38, 46-50; Col. 15, lines 13-39, figs. 2, 3, 4a, 5a; Grimm et al.). 
13 



14 Regarding claim 10, it is substantially similar to claim 3, and is rejected for the 

15 same reasons. 
16 

17 Regarding claim 11, the combination of Caputo et al. /Grimm et al., and Geiger et 

18 al., disclose: 

1 9 wherein the cryptographic module uses public key cryptography (Caputo et al., 

20 Col. 1 , lines 27-39; Col. 1 1 , lines 1 8-59). 
21 
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1 Regarding claim 12, the combination of Caputo et al., Grimm et al., and Geiger et 

2 al., disclose: 

3 means for sending and transmitting data using WAP (Geiger et al., Fig. 1 , Col. 9, 

4 lines 22-53). 
5 

6 Regarding claims 13, 14, and 15, they are substantially similar to claims 32, 33, 

7 and 34 and they are rejected for the same reasons. 
8 

9 Regarding claims 16 and 17, the combination of Caputo et al., Grimm et al., and 

10 Geiger etal., disclose: 

1 1 wherein the cryptographic module comprises a Wireless Identity Module card 



12 and wherein the cryptographic module comprises a Wireless Identity Module card which 

1 3 allows communications using Wireless Transport Layer Security. (Geiger et al., col. 1 1 , 

14 line 64 - col. 12, line 8; fig. 4, elems. 450, 452). 
15 



16 Regarding claim 18, the combination of Caputo et al., Grimm et al., and Geiger et 

17 al., disclose: 

1 8 an interface for receiving a command from a personal computer, the mobile 

1 9 communications device acting as a cryptographic service provider for said personal 

20 computer in response to said command (Caputo et al., Col. 15, lines 13-39). 
21 
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1 Regarding claims 21 , 22, 25, 29, and 30, they are substantially similar to claims 2 

2 and 3, and they are rejected for the same reasons. 
3 

4 Regarding claim 35, it is substantially similar to claims 16, and is rejected for the 

5 same reasons. 
6 

7 Regarding claim 36, the combination of Caputo et al., Grimm et al M and Geiger et 

8 al., disclose: 

9 a cryptographic application program interface; and a cryptography service 

1 0 provider, wherein, when the cryptographic application program interface determines that 

1 1 the application requires cryptographic functionality, sends a command to the 

12 cryptography service provider (Caputo et al., Col. 15, lines 13-39), and wherein the 

1 3 cryptography service provider has a communications link to a cryptographic module of a 

14 mobile communications device, the cryptographic module of the mobile communications 

1 5 device being usable to encrypt communications between the mobile communications 

16 device and a telecommunications network over a wireless interface (Caputo et al., fig. 3: 

1 7 Grimm et al.), and wherein the cryptography service provider can obtain the 

1 8 cryptographic functionality, required by the application, from the cryptographic module 

19 of the mobile communications device (Caputo et al., Col. 2, lines 23-27; Col. 3, lines 33- 

20 38). 
21 
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1 Regarding claims 37, 38, 39 and 40, they are substantially similar to claims 32, 

2 33, 34, and 35 and they are rejected for the same reasons. 
3 

4 Regarding claims 42, it is substantially similar to claim 48 and it is rejected for the 

5 same reasons. 
6 

7 Regarding claim 44, the combination of Caputo et al., Grimm et al., and Geiger et 

8 al., disclose: 

9 the mobile communications device being able to communicate over a first 

1 0 wireless interface with a telecommunications network, and comprising a cryptographic 

1 1 module to provide cryptographic functionality for use in communications over the first 



12 wireless interface (Caputo et al., fig. 3; Grimm et al.), the mobile communications device 

1 3 further comprising a security manager module for receiving commands from a computer 

14 system over a second interface, wherein, in response to suitable commands received 

1 5 from the computer system over the second interface, the security manager module 

16 requests a cryptographic function from the cryptographic module, and returns the 

1 7 results of the cryptographic function to the computer system over the second interface 

18 (Caputo et al., Col. 15, lines 13-39). 
19 

20 Claims 5, 8, 9, 23, 41, 46, and 49 are rejected under 35 U.S.C. 103(a) as 

21 being unpatentable over the combination of Caputo et al., Grimm et al., and 

22 Geiger et al. as applied to claims 2, 3, 7, 10 - 18, 21, 22, 25, 29, 30, 35 - 40, 42, and 
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1 44 above, further in view of Ericsson, "Bluetooth - A Global Specification for 

2 Wireless Connectivity". 

3 

4 Regarding claims 5, 8, 9, 23, 41 , 46, and 49, the combination of Caputo et al., 

5 Grimm et al., and Geiger et al. disclose a wired connection between the device and the 

6 computer (Caputo et al., Col. 6, lines 41-61). They do not disclose a wireless 

7 connection or connection via a short-range transceiver incorporating Bluetooth wireless 

8 technology. 

9 Ericsson discloses the obvious use of wireless connections between devices 

10 (Ericsson, Page 1). Bluetooth, a short-range radio technology allows for the 

1 1 replacement of wired connections - "facilitating protected" wireless connections 

12 between mobile devices. As disclosed, Bluetooth technology can be used to replace 

1 3 "the cumbersome cable used today to connect a laptop to a cellular telephone". 

14 It would be obvious to one of ordinary skill in the art to combine the secure 

15 feature of wireless short-range radio connection and Bluetooth technology of Ericsson 

16 with the combination of Caputo et al., Grimm et al., and Geiger et al. because it is 

17 apparent that the ability to securely operate wirelessly would enhance a 

18 security/communication device designed to be mobile and portable. 
19 

20 Claims 43, 45, and 50 are rejected under 35 U.S.C. 103(a) as being 

21 unpatentable over the combination of Caputo et al., Grimm et al., and Geiger et al. 

22 as applied to claims 2, 3, 7, 10 - 18, 21, 22, 25, 29, 30, 35 - 40, 42, and 44 above, 
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further in view of RSA, "PKCS #11 v2.10: Cryptographic Token Interface 



2 



Standard". 



3 



Regarding claims 43, 45, and 50, the combination of Caputo et al., Grimm et al. 



4 and Geiger et al. discloses a portable encryption and authentication device. The device 

5 utilizes a modem and "industry compatible" modem commands for communication 

6 (Caputo et al., fig. 2, elem. 160; col. 17, lines 12-35). The combination, however, does 

7 not disclose specifically that the mobile communications device utilizes PKCS #1 1 with 

8 AT commands. 

9 RSA discloses that the PKCS #1 1 command set is the industry standard for 

10 encryption and authentication devices (RSA, pages 1-12). 

1 1 It would have been obvious to one of ordinary skill in the art to employ PKCS #1 1 

12 command set, disclosed by RSA to be the industry standard, in the combination of 

13 Caputo et al., Grimm et al., and Geiger et al. This would have been obvious because 

14 one of ordinary skill in the art would have been motivated for the purpose of utility and 

15 compatibility to utilize the standards defined by industry. Furthermore, the disclosure of 

16 AT commands is obvious as these are the standard industry commands used to 

17 communicate via modems, as evidenced by the definitions of "AT Command Set" and 

1 8 "Modem Standards" in Newton's Telecom Dictionary, 13 th ed . 
19 

20 
21 
22 
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1 Conclusion 

2 

3 Claims 1-50 have been rejected. 

4 

5 The following prior art made of record and not relied upon is considered pertinent 

6 to applicant's disclosure. 

7 Barlow et al., "System and Method for Configuring and Managing Resources on 

8 a Multi-purpose Integrated Circuit Card Using a Personal Computer", U.S. Patent 

9 6,038,551. 

10 Di Santo et al., "Stand-Alone Telecommunications Security Device", U.S. Patent 

11 6,430,691 B1. 

12 Ganesan et al., "Modem Compatible Method and Apparatus for Encrypting Data 

1 3 That is Transparent to Software Applications", U.S. Patent 5,978,481 . 

14 Seiderman, "Portable Cellular Telephone With Credit Card Debit System", U.S. 

15 Patent 5,850,599. 

16 Wang, "Portable Electronic Authorization Devices and Methods Therefor", U.S. 

17 Patent 5,917,913. 

1 8 Muftic, "Smart Token System for Secure Electronic Transactions and 

19 Identification", U.S. Patent 5,943,423. 

20 Muftic, "Secure World Wide Electronic Commerce Over an Open Network", U.S. 

21 Patent 5,850,442. 

22 "WAP White Paper", AU-System, February 1 999. 
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Newton, Newton's Telecom Dictionary, 13 l ed., 1998. 



2 



3 



A shortened statutory period for reply is set to expire 3 months (not less than 90 



4 



days) from the mailing date of this communication. 



5 



Any inquiry concerning this communication or earlier communications from the 



6 examiner should be directed to Jeffery Williams whose telephone number is (571 ) 272- 

7 7965. The examiner can normally be reached on 8:30-5:00. 



9 supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 

1 0 number for the organization where this application or proceeding is assigned is (703) 

1 1 872-9306. 



13 Patent Application Information Retrieval (PAIR) system. Status information for 

14 published applications may be obtained from either Private PAIR or Public PAIR. 

15 Status information for unpublished applications is available through Private PAIR only. 

16 For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

1 7 you have questions on access to the Private PAIR system, contact the Electronic 

18 Business Center (EBC) at 866-217-9197 (toll-free). 



8 



If attempts to reach the examiner by telephone are .unsuccessful, the examiner's 



12 



Information regarding the status of an application may be obtained from the 



19 
20 
21 
22 



Jeffery Williams 
Assistant Examiner 
Art Unit 2137 




SUPERVISORY PATENT EXAMINER 



23 
24 



